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DETAILED ACTION 
Claim Rejections - 35 USC § 103 

1 . The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

2. Claims 29, 30, 33, 35, 37, 39-41 , 43-45, and 47-49, are rejected under 35 U.S.C. 
103(a) as being unpatentable over Le et al., US Patent number 5,883,956 in view of 
Ghaibeh et al., USPN 5,926,478. 

With regard to claims 29, 39, 43, and 47, Le discloses a cryptographic feature 
enablement system (column 10 lines 25-29), including a processing unit (column 10 line 
29) a cryptographic chip (SPU, abstract) including circuitry configured to perform 
encryption and decryption for a plurality of cryptographic systems (column 7 lines 51- 
56), where each system provides a different level of security (column 8 lines 17-22), a 
non-volatile read/write memory storing an encrypted token (column 6 lines 51-53) 
including encrypted initialization data (column 5 lines 33-52) for enabling circuitry 
configured to perform one of the cryptographic systems in the cryptographic chip 
(column 4 line 65-column 5 line 4), a bus connecting the processing unit to the non- 
volatile memory and the cryptographic chip (column 6 lines 54-55) to transmit data 
between the processing unit, the non-volatile memory and the cryptographic chip, 
(Figure 1), and token authentication circuitry in the non-volatile memory to authenticate 
the encrypted initialization data in the encrypted token (column 11 line 42-column 12 
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line 9) wherein the initialization data enables the circuitry in the cryptographic chip to 
perform encryption and decryption of data for one of the plurality of cryptographic 
systems (column 7 lines 51-56). Since Le teaches that the chip can possibly call each 
system (column 8 lines 17-22), he discloses that it can call the system with the highest 
level of security. Le does not disclose the initialization information should be decrypted, 
since it is not completely encrypted. Le does disclose that encrypting initialization 
information increases security (column 7 lines 5-15) and discloses the token should be 
secure for authentication reasons (column 5 lines 12-20). It would be obvious to one of 
ordinary skill in the art to encrypt the token to make it more secure while still proving 
authentication. Le does not disclose encrypting the token using the MAC address of the 
system. Le discloses encrypting the token (enabling bit string) with a device ID (column 
1 1 lines 49-67), and that the device ID is a system serial number (column 6 lines 1-4), 
but does not specifically mention a MAC address. Ghaibeh discloses that a MAC 
address is a unique device ID (column 5 lines 10-25). It would have been obvious for 
one of ordinary skill in the art to use a MAC address as the device ID of Le, since it is 
always unique. 

With regard to claims 41 , 45, and 49, Le discloses hashing the public key with 
the device ID (column 1 1 lines 59-64), thus creating a private key. Le also discloses the 
possibility of using public/private keys (column 14 lines 7-43). 

With regard to claims 33, 35, and 37, Le discloses that the system has a default 
security level, and is being reconfigured (column 4 line 65-column 5 line 4). 
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With regard to claims 30, 40, 44, and 48, Le discloses a non-volatile memory, as 
outlined above, but does not specify a FLASH memory. The examiner takes official 
notice that flash memory is a commonly used type of non-volatile memory. Since 
applicant did not traverse the examiner's official notice, it is taken to be admitted prior 
art (MPEP 2144.03). It would have been obvious for one of ordinary skill in the art to 
use Le's cryptographic control in a system using FLASH memory to allow for dynamic 
capability control. 

Response to Arguments 

3. Applicant's arguments filed 1 5 August 2007 have been fully considered but they 
are not persuasive. 

Applicant argues that the capability table in not a token and is not encrypted. The 
examiner points to Le, column 7 line 66-coumn 8 line 2, where Le discloses that the 
capability table is a string of bits referred to as an "enabling bit stream". The examiner 
feels that this reads on the term token. Further, Le discloses that the token is encrypted 
(column 11 lines 57-67). 

Conclusion 

4. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jacob Lipman whose telephone number is 571-272- 
3837. The examiner can normally be reached on M-Fr. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kambiz Zand can be reached on 571-272-381 1 . The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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